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Landing dispersion estimates for the Mars Exploration Rover missions were key 
elements in the site targeting process and in the evaluation of landing risk. This paper 
addresses the process and results of the landing dispersion analyses performed for both 
Spirit and Opportunity. The several contributors to landing dispersions (navigation and 
atmospheric uncertainties, spacecraft modeling, winds, and margins) are discussed, as are 
the analysis tools used. JPL’s MarsLS program, a MATLAB-based landing dispersion 
visualization and statistical analysis tool, was used to calculate the probability of landing 
within hazardous areas. By convolving this with the probability of landing within flight 
system limits (in-spec landing) for each hazard area, a single overall measure of landing risk 
was calculated for each landing ellipse. In-spec probability contours were also generated, 
allowing a more synoptic view of site risks, illustrating the sensitivity to changes in landing 
location, and quantifying the possible consequences of anomalies such as incomplete 
maneuvers. Data and products required to support these analyses are described, including 
the landing footprints calculated by NASA Langley’s POST program and JPL’s AEPL 
program, cartographically registered base maps and hazard maps, and flight system 
estimates of in-spec landing probabilities for each hazard terrain type. Various factors 
encountered during operations, including evolving navigation estimates and changing 
atmospheric models, are discussed and final landing points are compared with approach 
estimates. 
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I. Introduction 

T HE Mars Exploration Rover (MER) Project comprised two separately launched spacecraft, named Spirit and 
Opportunity. Spirit was launched on June 10, 2003, and landed safely on Mars on January 4, 2004, near the 
center of Gusev crater. Opportunity launched July 8, 2003, and landed successfully in Meridiani Planum, on January 
25, 2004. Each mission included plans for as many as six Trajectory Correction Maneuvers (TCMs) to target the 
correct entry conditions and achieve the desired landing point. Entry was direct (from interplanetary space), pro- 
grade, and unguided. At a height of approximately 7.5 km, a parachute was deployed, followed by jettison of the 
heatshield. The lander was then lowered from the backshell on a bridle, and airbags were inflated, surrounding the 
lander. Shortly before touchdown, solid rockets on the backshell slowed the spacecraft further, and the lander was 
cut free from the bridle to bounce and roll to a stop. On the surface, the airbags were deflated and retracted, and the 
tetrahedron-shaped lander was opened, allowing the rover inside to exit and begin the surface science mission. 

A key element during development and operations was the calculation and evolution of the landing footprint, and 
how that interacted with the capabilities of the flight system to affect total mission risk. A summary of the early 
history of landing footprint estimates, and how that influenced site selection during development, can be found in 
Ref. 1. The following paper addresses the issues and results of landing dispersion calculations during late 
development and through operations of both missions. 

II. T raj ectory Analysis T ools 

Two trajectory propagation tools were used for MER landing dispersion analyses: the Program to Optimize 
Simulated Trajectories (POST) program 2 developed at the NASA Langley Research Center (LaRC), and the 
Atmospheric -Entry Powered Landing (AEPL) program developed at the Jet Propulsion Laboratory (JPL). Both 
programs used the same LaRC-developed aerodynamics database, which provided drag and other aerodynamic 
coefficients as a function of Mach number and capsule angle-of-attack. Also common between the two programs 
were the atmospheric density models, 1 mesoscale wind models, 3 and the spacecraft parameters. Both programs 
modeled configuration changes (heatshield separation, airbag inflation, etc.) and non-instantaneous parachute 
deployment and retro-rocket firing. 

The POST trajectory analysis was performed modeling “six degree of freedom” (6DOF) dynamics, in which all 
forces and torques on the spacecraft are included, from atmospheric interface to parachute deployment. During this 
portion of the entry, the full set of capsule aerodynamics and mass properties were incorporated in the simulation to 
accurately model the hypersonic descent. From parachute deployment to landing, “three degree of freedom” (3DOF) 
dynamics were used, in which only the drag force is modeled and is assumed to act opposite the wind-relative 
velocity vector. The POST trajectory simulation seamlessly transitions from 6DOF to 3 DOF dynamics within a 
single continuous simulation. 

Version 4.10C2 of the AEPL program, delivered for MER operations, used 3DOF analyses throughout. (The 
current version of AEPL also models 6DOF effects.) Because MER used unguided ballistic entries, the 3DOF 
results from AEPL agreed well with POST’s 6DOF/3DOF simulations. AEPL was also used in maneuver design, in 
conjunction with the navigation cruise trajectory propagation and targeting programs. 

Monte Carlo analyses were used to determine the landing footprint. Quantities varied in the Monte Carlo runs 
typically included 2000 entry states, atmosphere and wind profiles, spacecraft parameters such as entry mass, drag 
coefficients for the entry capsule, backshell, parachute, and airbags, and (in the case of POST) entry capsule mass 
moments of inertia and center of mass offsets. 

III. Landing Dispersions: Contributing Factors 

A number of factors influence the geometry of landing footprints on Mars, including declination of the 
interplanetary approach trajectory, landing site location, and the sense of entry (pro-grade, retro-grade, or polar). All 
MER entries were pro-grade, with Mars equator-relative declinations of 3.6° (Spirit) and 2 A° (Opportunity), and 
were targeted to sites within 15° of the equator. These purely geometric characteristics were essentially fixed for a 
given landing target and launch date, tending to produce long, thin landing ellipses oriented roughly East- West. 

The MER landing footprints were also influenced by a number of other factors, specifically interplanetary 
navigation uncertainties, atmosphere modeling uncertainties, spacecraft modeling uncertainties, winds, and EDL 
margins. Figure 1 illustrates the relative sizes of landing dispersions for each of these contributing factors. In this 
illustration, 99% landing ellipses (two dimensional normal distribution 3a ellipses) were calculated for each factor 


Klumpp, A. R., Atmospheric-Entry, Powered Landing Simulator V4.10C User’s Guide, April 23, 2003 (JPL 
Internal Document) 
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for the Spirit mission, and co-located at the Spirit landing target to enhance comparison. Meridiani ellipses were 
very similar in size but had larger azimuths. (Sizes and orientations for a variety of landing dispersion estimates for 
both missions are summarized in Section VII, Table 2.) 
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Figure 1: Contributors to Landing Dispersions 


A. Navigation Uncertainties 

The accuracy with which the entry state of the spacecraft was determined relative to Mars, given the capabilities 
of Earth-based radiometric orbit determination and the propagated effects of maneuver execution errors, dominated 
the landing dispersions for the majority of cruise. Landing footprints became meaningful only during late cruise, by 
which time the injection errors and planetary protection bias had been removed, the spacecraft was targeted close to 
its final landing point, and orbit determination uncertainties were small enough to allow visualization of the landing 
ellipse on a site map. 

Figure 1 shows AEPL “navigation only” landing dispersions based on the December 2003 covariance study, and 
also at the final 2-way data cutoff at Entry - 105 minutes. In both cases, entry states were varied, but the other 
models (atmosphere, winds, and spacecraft and aerodynamic properties) used nominal values. Navigation errors 
were strongly dependent on time-to-go to entry, as new data were processed and the propagation uncertainties were 
reduced. For MER, the use of Delta-differenced One-way Ranging (ADOR) was a key element in producing the 
small navigation uncertainties seen during operations. 4 

B. Atmospheric Density Variations 

Atmosphere density variations also have a significant effect on landing dispersions. In general, low densities 
cause the spacecraft to go further down-track, while high densities cause landing to be up-track of the mean. (Both 
missions entered roughly West-to-East. Lower densities caused landings along the ground track further East; higher 
densities caused landings West of the mean landing point.) As navigation uncertainties fell during final approach, 
atmospheric modeling began to dominate the along-track (long axis) dimension of the landing ellipses. Also, 
atmosphere models were updated during final approach for both Spirit and Opportunity , due to the effects of a dust 
storm that reached its maximum in mid-December, 2003. Included in Fig. 1 are AEPL “atmosphere only” ellipses, 
which illustrate the difference between the “development” model (Kass-Schofield V2.4.1) 1 and an updated model 
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used at entry (Kass-Schofield v3.1, based on Mars Global Surveyor (MGS) Thermal Emission Spectrography (TES) 
observations from December 27, 2003). The updated model had larger uncertainties than the development model. 
The effect of atmospheric density variations is seen in either case as a very thin ellipse with almost no cross-track 
dimension. 

C. Spacecraft and Aerodynamic Modeling 

A number of spacecraft properties, including drag coefficients of the parachute, backshell, and lander bodies, and 
mass of the entry capsule, must also be varied as part of the Monte Carlo analyses. The POST analyses also included 
variations in the center of mass, mass moments of inertia, and entry attitude, which affected the lift and aerodynamic 
torque (6DOF effects) on the spacecraft. Typically, all of these effects are much smaller in the along-track direction 
than the influence of atmosphere modeling uncertainties, as shown in Fig. 1. 

D. Wind Variations 

Uncertainties in winds encountered during EDL also affect landing dispersions. The winds used in these analyses 
were mesoscale models generated for use by the MER Project. 3 As illustrated in Fig. 1, this category produces the 
smallest of the modeled effects in the Monte Carlo results. 

E. Un-margined and Margined Ellipses 

All of the above factors are varied independently in a baseline Monte Carlo analysis, producing a landing 
dispersion (an “un-margined” ellipse, as illustrated in Fig. 1) based on the selected models. Because the contributors 
are statistically independent, a root sum square of the individual dimensions produces an ellipse nearly identical in 
size to the combined result. Note that the only significant contributors to cross-track dispersions are navigation 
uncertainties, spacecraft modeling (6DOF effects in particular), and winds. 

7. EDL Margins 

Proper evaluation of landing site risks required that margins be added to account for other effects that are un- 
modeled or unknown, or to add robustness in the event flight conditions lay outside the envelope defined by the 
selected models. EDF margins used during operations included the following effects: density models being in error 
by ±2.5% with respect to the models (causing an additional uncertainty of ±2.5 km in the along-track direction), 
winds in error by a factor of two with respect to the mesoscale models (±4 km along-track, ±2 km cross-track), map 
error (±1 km along-track and cross-track), roll stop distance (±0.5 km along-track and cross-track), a “targeting 
margin” to account for the possibility that a post-maneuver ellipse may lie partially outside a desired target ellipse 
(±2 km along-track), and an arbitrary “control floor” reflecting experience from previous landed missions (±1 km 
along-track and cross-track). The root sum square of these independent effects determined the along-track margin of 
±5.5 km, and cross-track margin of ± 2.5 km, which were simply added to the “un-margined” 99% ellipses. The 
resulting “margined” ellipse (see Fig. 1) also was assumed to be a normally distributed 99% ellipse. Fanding risk 
was assessed for both ellipse types during final approach. 

IV. Landing Site Maps 

During MER development and operations, landing hazards were analyzed and mapped as part of the activities of 
the MER Landing Sites Working Group. Hazard map images generated for the Spirit and Opportunity landing sites 
were then converted for use in MarsLS, 5 a landing site visualization and statistical analysis tool described in Section 
V. As part of this process, the hazard map for a site was compared with a cartographically registered base map 
supplied by the Mars Geodesy and Cartography Working Group. The result was an accurately registered 
representation of the landing site and site hazards, which could be used for landing site safety analysis and TCM 
decision-making. 

A. Hazard Maps and Terrain Classes 

Rigorously modeling all the different terrains in and near the MER landing ellipses (500 km 2 - 800 km 2 in area) 
would have been infeasible. Instead, the landing region was divided into a few distinct terrain classes, chosen such 
that the end-to-end performance of the landing system, in the presence of other site-specific environmental 
characteristics such as winds, was essentially constant within that terrain class. 

Hazard map terrains 1 were related to simulated terrains that consisted of 3 m or 10 m resolution Digital Elevation 
Maps (DEMs), 6 several square kilometers in area, generated using stereogrammetry and photoclinometry techniques 
on MGS Mars Orb iter Camera (MOC) stereo images of representative portions of the landing ellipse. Rocks were 
randomly scattered on this digital terrain using the standard exponential size-frequency distribution with rock 
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abundance percentage derived from Viking Infrared Thermal Mapper (IRTM) data. 7,1 Hazard terrain maps were 
generated for each landing site 1 so that specific DEMs could be extrapolated to similar areas throughout the ellipse 
and to nearby areas outside the ellipse. The DEMs and rock characteristics were used in the EDL performance 
simulations to assess landing system performance (including airbag response) on different terrains. 

The maps are based on geomorphology and surface roughness and slope derived from MGS MOC and Odyssey 
Thermal Emission Imaging System (THEMIS) images. For each landing area, four terrains were identified and, 
where possible, correlated with specific digital elevation models. 5 6 The hazard map images delivered for MER 
operations are shown in Fig. 2. These hazard maps are consistent with the slopes over the ellipses derived from 
photoclinometry 8 and the geologic and morphologic maps (e.g., Ref. 9 and Ref. 10). The slopes and relief of the 
hazard units within the ellipses further demonstrate that the Meridiani site has the lowest slopes, with parts of Gusev 
having the highest slopes at the 3 m -10 m scale. 



a) Spirit Landing Site Hazard Map (Gusev) 

Red = “not survivable, Green = cratered plains 
Orange = etched terrain, Yellow = secondary craters 


b) Opportunity Landing Site Hazard Map (Meridiani) 

Red = “not survivable, Green = plains 
Orange = eroded craters, Yellow = subdued craters 


Figure 2: Hazard Map Images 

Gusev has a background cratered plains unit (marked green in the Gusev map, Fig. 2(a)), a more heavily cratered 
plains unit (yellow), and an etched terrain unit (orange), which are represented by a 6 m photoclinometry DEM and 
two 3 m photoclinometry DEMs, respectively; two of these units have moderate slopes and the etched terrain has 
high relief and high slopes. Based on the final pre-entry navigation solution at Gusev, there was an 85% chance of 
landing in cratered plains with an RMS slope of approximately 4°, a 13% - 15% chance of landing in the slightly 
rougher, heavily cratered plains terrain (4.5° RMS slope), and < 1% chance of landing in the very rough etched 
terrain (RMS slope of 9.5°). 

The Meridiani hazard map includes a background terrain (colored green in the Meridiani map, Fig. 2(b)) and 
subdued low-relief craters (yellow). Both of these units have low slopes and low relief. A number of subdued low- 
relief craters ranging in diameter from 0.5 km to less than 2 km, were mapped within the ellipses. Stereo 10 m 
DEMs were used to simulate landing in each of these terrains. The final pre-entry navigation solution at Meridiani 
Planum yielded a 95% - 96% chance of landing in the extremely benign terrain (RMS slope approximately 2°) and a 
4% - 5% chance of landing in fairly smooth subdued craters with an RMS slope of approximately 4°. Engineering 
analyses indicated that both of these terrain types were virtually indistinguishable from each other in terms of 
landing safety hazards. (See Section VI for a discussion of the landing system in-spec probabilities assigned to each 
terrain type.) 

An “eroded craters” terrain type, colored orange in Fig. 2(b) was also present at Meridiani. This terrain was 
characterized by somewhat greater relief and slopes than the subdued craters, and was considered slightly more 
hazardous. Probabilities of landing in this terrain type were very small (< 0.02%) at the time of the final navigation 
solution. 
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Both sites have a unit of fresh craters larger than about 200 m that appear to have fresh bowl shapes and are 
morphologically distinct from the craters in the units just described. The largest fresh crater in any of the ellipses is 
approximately 2 km. Because of steep slopes that could spoof the altimeter and cause mis-timed firing of the 
retrorockets, landing in these areas was assumed to be not survivable in the simulation, even though landing inside 
many of these craters would be survivable. Total relief of these craters are assumed similar to fresh bowl shaped 
craters with depths of approximately 20% and rim heights approximately 4% of their diameters. The final pre-entry 
margined landing dispersions at Gusev included 7 fresh craters; the probability of landing in these craters was very 
small (< 0.2%). The pre-entry Meridiani margined ellipse included 2 fresh craters; probability of landing in these 
craters was negligible (< 0.01%). All “non- survivable” areas, including these fresh craters and Gusev wind hazards 
(described in Section 2, below), are marked red in Figures 2(a) and 2(b). 

Uncertainties in the hazard maps were handled qualitatively, by assessing the confidence in the characterization 
of the surface and winds in any given area. Areas near the target point and original planning ellipses were 
considered to be better characterized than more distant areas. 

7. Gusev Wind Hazards 

In certain portions of Gusev crater, predicted near surface winds were capable of inducing horizontal velocities 
in excess of the landing system’s capabilities. In order to fold this into the landing dispersion analyses, certain 
regions were marked as wind hazardous, independent of the surface hazard assessment. This assessment was based 
on a statistical analyses of the mesoscale wind models using the intermediate grid (approximately 5 km horizontal 
resolution) from the Mars Regional Atmospheric Modeling System (MRAMS) model. 11 These wind hazard areas, 
which extended as much as 25 km inward from the Gusev crater wall, were combined with the surface hazards to 
create a contiguous “non- survivable” hazard area, colored red in the hazard maps. 

The regions of dangerous winds are due to two primary factors: crater rim winds (topographically driven strong 
updrafts that then interact with the regional flow), and katabatic (slope) winds driven by Ma'adim Valles. For each 
location, the following parameters were evaluated: effective wind speed, mean turbulent kinetic energy, effective 
turbulent kinetic energy, and shear. 3 For each parameter, a cutoff value to flag locations as “not survivable” was 
selected, based on engineering analyses, representing the point where the flight system was at the border of the 
dispersed wind profiles used for EDL characterization. 

A broad region in the southern part of Gusev crater, characterized by high katabatic winds, was right at the limits 
of the models. Changing the cutoff values by 10% could move the boundary of this region significantly. 

B. Base Maps 

The Landing Sites Working Group used a variety of data (remotely-sensed visual and infrared images from 
orbiting spacecraft, and other topographic data) to characterize the landing sites and to select an area for landing, 
relative to other surface features. Trajectory correction maneuvers, however, are designed to place the spacecraft at a 
specific location in inertial space, at a specific time, to ensure landing at the desired point. The objective of 
producing a precision cartographic map of a landing site was to provide a tie between the body-fixed coordinates of 
the landing site and the inertial coordinate system used for maneuver targeting. The goal was to make this tie to 
accuracy much better than the accuracy of controlling the landing, as quantified by the landing error ellipse. For 
MER, this goal translates into having a map tie accurate to 1 km (3a) or better. 

This level of accuracy was surpassed for both MER sites. The key was to tie imaging data to the local MGS 
Mars Orbiter Laser Altimeter (MOLA) topographic data. 12 MOLA produced over 10 billion laser altimetry points 
that have been tied together in Mars-fixed IAU/IAG 2000 coordinates 13 of planetocentric latitude, longitude, and 
radius, with a spatial accuracy of 2 m and a radial accuracy of 35 cm for the individual points. The spacing of these 
points is every 300 m in latitude with an average longitude spacing of 1.7 km at the equator going down to 200 m 
near the poles. 

All MOLA radii points in the MER landing sites were obtained and placed into a sinusoidal map projection 
having a resolution of 256 pixel/degree or about 230 m/pixel. A simple interpolation scheme was used to fill in 
missing data in the projection to produce local digital terrain models (DTMs) for the two MER sites. Then digital 
image models (DIMs) were produced by illuminating the DTMs using the lighting conditions that existed for the 
image datasets that were to be registered to the MOLA DTMs. Viking Orbiter images having 69 m/pixel resolution 
were used for the Gusev Crater. THEMIS infrared daytime images having 1 00 m/pixel resolution were used for the 
site in Meridiani Planum. 

In both sites, over 100 precision MOLA-derived cartographic control points were produced by manually 
measuring small features, mostly craters at the km level with some positive relief features as well, in the MOLA 
DIMs to obtain their latitudes, longitudes, and radii in Mars-fixed IAU/IAG 2000 areocentric coordinates. The 
points were also measured in the imaging data and a full stereo photogrammetric data reduction was performed 
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where instrument geometric, alignment, and pointing parameters were estimated along with control point locations 
and spacecraft orbit parameters. 

The results of the stereo photogrammetric process were used together with the MOLA DTM to register each 
pixel in the Viking Orbiter or THEMIS infrared images to the DTMs to produce precision controlled photomosaics 
in the form of local DIMs having spatial resolutions at the 100 m/pixel level (Fig. 3). After landing, the rovers were 
located in inertial space using direct-to-earth and orbiter relay radiometric tracking of the rovers, and in Mars-fixed 
DIM coordinates using rover panoramic images to meter level accuracy. 1 ^ ’*** The absolute position errors in the 
map tie between inertial space and Mars-fixed coordinates were less than 300 m for the Viking Orbiter based Gusev 
Crater DIM and less than 150 m for the THEMIS infrared based Meridiani Planum DIM, meeting the pre-landing 
requirements of 1 km (3 a). 



a) Spirit Base Map (Gusev Crater) b) Opportunity Base Map (Meridiani Planum) 

Figure 3: Base Maps 

V. Landing Site Visualization and Statistical Analyses: MarsLS 

MarsLS 5 is a MATLAB-based tool created for MER development and operations. The original intent was to 
provide landing site visualization, whereby latitude/longitude pairs from a Monte Carlo analysis could be placed on 
various cartographically registered maps. During MER development, the capabilities of this tool were expanded 
considerably to include various statistical analyses. The result is a general-purpose tool that can accept a variety of 
inputs and rapidly perform analyses useful in quantifying landing risks. Figures 1 and Figures 3-8 were all 
generated using MarsLS. 

A. Overview 

One of the mission design requirements for MER was to ’’provide the capability to display a calibrated image of 
Mars that contains the target landing site and to display specified latitude and longitude points (from multiple 
sources) on image.” 14 MATLAB 15 proved to be the best environment in which to rapidly develop such a graphical 
user interface (GUI) tool. This tool could take advantage of MATLAB’s flexibility, including existing MATLAB 
functions and GUI capabilities. 

The Mars Geodesy and Cartographic Working Group generated MER landing site maps in the NASA Planetary 
Data Systems (PDS3) §§§ format, Version 3.1. These site maps were calibrated to the MOLA reference surface to 


111 Golombek, M. P. and Parker, T. J., “Location of Spirit on Mars”, MER Localization Memo, 19 Jan. 2004. (JPL 
Internal Document) 

® Golombek, M. P. and Parker, T. J., “Location of Opportunity on Mars”, MER Localization Memo, 2 Feb. 2004. 
(JPL Internal Document) 

§§§ http://pds.jpl.nasa.gov 
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within 1 km (3 a). They contained the image and information about that image, such as pixel dimensions and latitude 
and longitude mappings. All images were sinusoidal equal-area projections. Using existing MATLAB functions, 
MarsLS is able to read these images, properly display them, and correctly map their pixels to Mars areocentric 
latitude and longitude. 

In addition to displaying the calibrated image, MarsLS can overlay a number of different features on the base 
image. For example, MarsLS is able to read and display a text file of latitude and longitude points, which were often 
created in AEPL or POST Monte Carlo runs. MarsLS can unwrap those points to a flat surface and create a two- 
dimensional normally distributed ellipse from those points. (The user can specify the statistical nature of the 
resulting ellipse, i.e. whether it is an n% ellipse or an n-sigma ellipse.) Alternatively, the user can import, specify or 
draw an ellipse, and define the statistical nature of the ellipse. The user can also overlay a grid in degrees or 
kilometers, draw or specify lines between features to determine surface distance, and specify or draw point 
locations. 

A significant feature of MarsLS is the ability to define or display areas which can be used to indicate hazards or 
areas of interest. These areas are defined as polygons with latitude and longitude-based vertices. The Statistical 
Analysis Package in MarsLS uses these area polygons, in conjunction with displayed ellipses, to rapidly calculate 
probabilities of landing in those areas. 


B. Mathematical Basis of the MarsLS Statistical Analysis Package 

Given an ellipse and a polygonal area, the probability P of landing inside the polygonal region is found by 
integrating the bi-variate probability distribution function (BvPDF) associated with the ellipse, as follows: 


P = 



IM- \(X- ^) T A~\X- g)\ dxdy, 

polygonal 

region 


(i) 


where A is the two-dimensional covariance described by the ellipse centered at ji=[id x , jd y ] T and X is the vector 
[x, y] T . This integration is non- trivial to perform. Fortunately, a novel algorithm, developed by John Michel at JPL, 
exists to integrate this function.****’ 111 ^ Michel first translates the origin of the system to the center of the ellipse and 
rescales the new axes by dividing by the standard deviations: 

§ = (x - |i x )/a x and r] = (y - |i y )/a y , (2) 

This results in a transformed covariance matrix T, equal to the correlation matrix of A. The integral is further 
simplified by rotating from the [§, r|] axes to axes parallel with the eigen-axes of T. The new system is scaled along 
the eigen-axes so that the resulting transformed covariance matrix is the identity matrix. The result of all these 
transformations is summarized in the following set of equations, mapping the original [x, y] system to a final [r, s] 
system: 
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where p is the correlation coefficient. In the [r, s], system the integral is greatly simplified. The dispersion ellipse is 
now a circle with unit radius centered at the origin, and the r and s integrations decouple. Also, each polygonal 
region is transformed to a new polygonal region by the change in coordinates. The probability integral can now be 
expressed as follows: 


P 


— JJexp[(r 2 + y 2 )/2] drds 

new 

polygon 


(4) 


Michel, J. R., "Users Guide for HAZPRB Computer Program, Including Algorithm Description," JPL Interoffice 
Memo, 26 Jun. 2000. (JPL Internal Document) 

tm Michel, J. R., "MATLAB Functions for Computing Probabilities of Hitting Circular, Elliptical, or Polygonal 
Target Regions," JPL Interoffice Memo, 2 Aug. 2002. (JPL Internal Document) 
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Integration over the transformed polygonal area is performed by first dividing it into a set of triangles. To integrate 
over any one of the triangles, the [r, s] coordinate system is rotated to be parallel with one side of the triangle, 
allowing the integral to be expressed as the sum or difference of integrals over two right triangles. The probability 
of being inside each right triangle can be efficiently computed by converting the double integral of Eq. 4 into an 
easier one-dimensional integral. The probability for each triangle is computed, and summed to get the cumulative 
probability for the entire polygonal region. 

C. Hazard Area Generation for MarsLS 

In order for MarsLS to calculate the probability of landing in a hazard area, the hazard maps were processed to 
provide the polygonal areas described above. The hazard map images were first converted into PD S3 format, and 
adjusted as needed to provide the correct registration with respect to the base maps. The result was a 
cartographically registered grayscale image, readable by MarsLS, with unique levels of gray for each hazard type. 
This image was then read by MarsLS, and a separate MATLAB script was used to outline each hazard area. The 
output of the script was a text file containing ordered latitude/longitude pairs for each distinct hazard area. The 
resulting areas could be displayed on any map (or a blank grid) and probability calculations performed. Figures 5 
through 8 include examples of such areas displayed on the base map. The colors of the outlined regions correspond 
to the colors on the hazard map. Some hazards lay entirely within the confines of other hazards, so it was necessary 
to have both “positive” and “negative” areas to book-keep probabilities properly. Areas outside the regions covered 
by the hazard map images were, conservatively, set to red or “not survivable”. 

Other regions not associated with landing hazards were also identified for statistical analysis. These included 
areas where MOC coverage was available, and, for Meridiani, regions where night-time temperatures were low, 
potentially affecting mission lifetime. Examples are shown in Figures 7 and 8; white rectangular areas are MOC 
coverage swaths; black irregular areas are low temperature regions. Probabilities of landing in these areas were 
assessed as secondary mission risk factors. 

VI. Calculation and Use of EDL In-Spec Probabilities 

Rigorously, the total probability of an EDL trajectory remaining within flight system specifications requires 
evaluation of numerous performance metrics. The MER flight system performance envelope was broad enough, 
however, that during final approach, the “Entry/Descent” performance (associated with heating rate and integrated 
heating limits, maximum allowable deceleration, parachute deploy limits on Mach number and dynamic pressure, 
limitations on heatshield deploy conditions, and minimum acceptable time from chute deploy to landing) was 
predicted to be 99% - 100% in-spec for all but the most anomalous conditions. This expectation was born out during 
operations. 

The great majority of EDL mission risk was associated with the final phase: terminal descent and landing, in 
particular the final interaction of the flight system with the surface. By combining the capabilities of MarsLS (rapid 
calculation of the probability of landing in a given hazard type for a given landing dispersion) with a knowledge of 
flight system consequences (probability of being in-spec for a given hazard type) it became possible to quantify 
mission risk during final approach, and generate contours for assessing mission risk over a wide area of the landing 
site. 

A. Flight System Capabilities: Terrain-specific In-spec Probabilities 

With one exception, for each terrain type identified in the hazard maps, DEMs were used by the EDL Systems 
Group in landing simulations. (A DEM for Meridiani’ s “eroded craters” terrain was never created; the in- spec 
probability for this hazard type was based on analyses using similar terrain.) These DEMs and other environmental 
models were used in a suite of high-fidelity programs capable of simulating the entire spacecraft trajectory, 
including all spacecraft configuration changes and multi-body dynamics and kinematics, from cruise stage 
separation through bouncing and rolling on the surface. Using these tools, EDL systems analysts identified in-spec 
probabilities for each unique terrain, taking into account the measurement types available (RADAR altimetry, 
descent imaging, IMU and accelerometer measurements), the environment (atmospheric density, winds, rock 
distribution, and terrain slopes), and flight system characteristics (parachute properties, multi-body terminal descent 
dynamics, retrorocket characteristics, and airbag properties). All results assumed the spacecraft and flight software 
work as designed (i.e. no workmanship or software errors). 

Estimates of the in-spec probabilities for each terrain type were revised continually throughout development and 
into operations, as updated analyses became available. The terrain-specific in-spec probabilities used during final 
approach for each mission are summarized in Table 1. The uncertainties in these numbers are approximately ±2%; 
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this value is based on run-to-run simulation variability, and assumes the EDL conditions lie within the modeled 
envelope of environmental uncertainties. 


Table 1 Final Terrain-Specific In-spec Probabilities 


Spirit Landing Site (Gusev Crater) 

Opportunity Landing Site (Meridiani Planum) 

Terrain Type 

Hazard Map 
Color 

P(in-spec) 

Terrain Type 

Hazard 
Map Color 

P(in-spec) 

Cratered Plains 

Green 

97.6% 

Cratered Plains 

Green 

99.3% 

Heavily Cratered Plains 

Yellow 

97.6% 

Subdued Craters 

Yellow 

99.3% 

Etched Terrain 

Orange 

89.4% 

Eroded Craters 

Orange 

93% 

“Not Survivable” 

Red 

0% 

“Not Survivable” 

Red 

0% 


B. Total In-spec Probabilities 

Given the ability to calculate the probability of landing in any given terrain type (for a specified landing ellipse) 
and the in-spec rate for each terrain class, it was possible to calculate a total probability of being in-spec for any 
landing dispersion. This was done by convolving the two sets of probabilities as follows: 

Total P(in-spec) = ^ P(landing in terrain type i) * P(in-spec landing for terrain type i) (5) 


In this way, a multitude of analyses (navigation estimates, Monte Carlo EDL trajectory propagation, and flight 
system environmental interactions) were distilled into a single measure of landing risk, easily updated whenever 
new landing dispersions became available. During operations, P(in-spec) values for both margined and un-margined 
ellipses were calculated; the value reported was the smaller of the two. 

1. Probability Contours 

By extending the process, it became possible to contour P(in-spec) values across a landing site. In MarsLS, 
landing ellipses were laid down in a grid over the hazard areas. Total in-spec probabilities were then calculated for 
each ellipse, using Eq. 5. The result was a unique P(in-spec) value associated with the latitude and longitude of the 
center of each ellipse. Contours were generated using a MATLAB script that employed a two-dimensional 
interpolation mode selected by the user (nearest neighbor, bilinear, cubic spline, or bicubic) to smooth the in-spec 
surface. The contours were generated as a type of area file, i.e. ordered sets of latitude/longitude pairs, which could 
be displayed in MarsLS. 

Example contour plots are shown in Fig. 4, using cubic spline interpolation. Margined ellipses were used for this 
figure, using entry dispersions from cruise covariance studies (assuming TCM-5 occurred two days before entry), in 
conjunction with the final terrain-specific in-spec probabilities. As expected, the probability contours are highly 
correlated with the features of the hazard map, in particular the location of red (“non-survivable”) hazards. Contour 
maps like these were useful in identifying optimal areas (from a landing risk standpoint) and for providing insight 
into landing risk variability across a wide area. This allowed mission planners to understand proximity to probability 
“cliffs”, and to evaluate quickly the risk incurred by anomalous or unplanned events such as an incomplete 
maneuver. 

The MER spacecraft allowed for a variety of maneuver modes to be implemented, depending on the use of the 
lateral and axial thrusters on the cruise stage. “Vector mode” maneuvers, which used both sets of thrusters, 
sometimes produced a maneuver “ground path” (locus of possible landing points as a function of maneuver 
duration) which included regions of low P(in-spec) values. Alternate maneuver modes, using one or the other 
thruster type exclusively, produced maneuver ground paths that always increased P(in-spec) but sometimes landed 
slightly off-target. The probability contours provided a quick, approximate assessment of these options, sometimes 
allowing certain maneuver modes to be eliminated early in the maneuver development process. 
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Gusev was the more challenging site, containing more hazardous areas more closely placed than Meridiani. Even 
in Gusev, however, as illustrated in Fig. 4(a), optimal regions were relatively large and involved only gradual 
changes in in-spec probabilities as the center point was moved, particularly in the direction of the major axis of the 
landing ellipses (roughly East-West). The much more pronounced sensitivity of in-spec probabilities to cross-track 
(roughly North-South) movement is clearly illustrated. Meridiani is a much more benign landing environment, as 
illustrated in Fig. 4(b), where the optimal region covers a much larger area. 



(b) Opportunity Landing Site (Meridiani Planum) 


Figure 4: In-spec Probability Contours 
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VII. Landing Targets and Requirements 

Selection of the landing sites for MER involved assessments of numerous factors, including science merit, the 
inherent limitations of the flight system (primarily site altitude, landing dispersions, and landing safety issues), and 
mission return and mission lifetime. 1 The landing site targets, i.e. the latitude and longitude navigators would target, 
were first determined by reviewing the characteristics of the site and selecting a target landing point which caused 
the landing dispersion ellipse to avoid hazardous areas, while remaining within well-characterized regions of high 
science value. These targets were periodically revised throughout development, as the consequences of landing in 
various terrains became better understood and as landing dispersion estimates changed. 

Once the MarsLS statistical analysis package became available, the targets were evaluated to see how well 
landing hazards were being minimized. In July, 2003, Spirit's landing target in Gusev crater was moved 
approximately 2 km to the final target location of -14.59° areocentric latitude, 175.3° East longitude (IAU/IAG 2000 
frame), based on MarsLS estimates of the optimal location of un-margined and margined TCM-5 ellipses. As 
indicated in Fig. 4, this target is slightly south of the center of the 97% in- spec contour. For Meridiani, in-spec 
probabilities were high enough, and varied so minimally across the landing site, that no change to the landing target 
(-1.98° areocentric latitude, 354.06° East longitude) was indicated. 

Total landing in- spec probability was one of several factors used for deciding whether or not to perform a 
trajectory correction maneuver. For Spirit , this factor was “green”, i.e. no maneuver was indicated, if P(in-spec) > 
91%; for Opportunity, this factor was green if P(in-spec) > 96%. Probability contours for these values are shown as 
white lines on Fig. 4. These probability levels were approved at the March 2003 Landing Site Peer Review, at which 
the Gusev and Meridiani sites were selected for MER. (The Gusev site for Spirit was selected provisionally at this 
meeting, pending additional analyses. Gusev was formally selected in September 2003.) 

These probability values were the primary landing site requirements the navigation team used, as part of the 
maneuver design process. 16 In this way, landing in-spec probability values (within well-characterized areas of the 
surface) were being targeted, more than a formal “target ellipse”. Prior to launch and periodically throughout cruise, 
however, covariance studies were used to benchmark landing ellipse estimates for planning purposes. 

Table 2 summarizes the landing targets, probability requirements, and estimated landing ellipses for both 
missions, compared with final landing ellipse estimates. In this table, the landing ellipse properties refer to 99% 
margined ellipses, based on expected performance at TCM-5, using the development atmosphere model. All 
locations are areocentric latitude and East longitude with respect to the IAU/IAG 2000 reference. Azimuth is 
clockwise with respect to true North. 

Table 2 Landing Targets and Requirements. Margined Landing Dispersion Predicts vs Actuals 


Targets and Requirements 

Spirit 

Opportunity 

Landing Target 

-14.59°, 175.3° 

-1.98°, 354.06° 

Landing P(in-spec) Requirement 

91% 

96% 


Predicts 

Spirit 

Opportunity 

Landing Dispersions (June/July 2003) 

81 x 12 km, 75° Azimuth 

81 x 11 km, 83° Azimuth 

Landing Dispersions (August 2003) 

78 x 10 km, 75° Azimuth 

85 x 1 1 km, 83° Azimuth 

Landing Dispersions (December 2003) 

63 x 9 km, 75° Azimuth 

65 x 9 km, 84° Azimuth 


Actuals 

Spirit 

Opportunity 

Landing Point 

-14.57°, 175.5° 
(10 km from Target) 

-1.95°, 354.47° 
(25 km from Target) 

Final Pre-entry Landing P(in-spec) 

97% 

99% 

Final Pre-entry Landing Dispersions 

73 x 8 km, 75° Azimuth 

71x10 km, 86° Azimuth 


Navigation targeting performance to the top of the atmosphere was much better than predicted. For example, 
TCM-5 3a flight path angle dispersions at the final pre-entry solution were 0.01 °{Spirit) and 0.02° (Opportunity), 
compared with the December 2003 covariance study estimates of 0.07 °{Spirit) and 0.08° {Opportunity). By the final 
week of cruise, however, landing ellipse along-track dimensions were dominated by atmospheric dispersions, rather 
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than entry state uncertainties. The reason the final landing dispersions were larger than those predicted by the final 
cruise covariance study, was due to the use of updated atmosphere models with larger dispersions. 

VIII. Landing Dispersion Results for Spirit and Opportunity 

The final weeks before entry and landing involved similar activities for both missions. Landing dispersions were 
analyzed starting approximately 1-2 months from entry. Starting about two weeks from entry, landing dispersion 
assessments, including calculation of in-spec probabilities, were performed daily. In support of the final maneuvers 
(TCM-4, TCM-5, and TCM-6), analyses were performed for cases with and without maneuvers. Cases without 
maneuvers used orbit determination estimates only; cases with maneuvers included the propagated effects of 
modeled maneuver execution errors. POST and AEPL Monte Carlos were used to supply the landing footprints. 
After landing, radiometric analyses and landmark triangulation were used to determine the final position of the 
landers. The following results summarize the landing dispersions for both missions during approach, and compare 
the last pre-entry predicts with the final locations. 

A. Spirit 

Figure 5 shows the history of landing dispersions from Entry-29 days (December 5, 2003 Pacific Standard Time 
(PST)) to Entry (January 3, 2004 PST), using 99% margined ellipses. This interval starts approximately two weeks 
after the third TCM was performed. Figure 5(a) shows the interval from December 5 to December 26, using AEPL 
estimates; each ellipse or group of ellipses is noted with the PST date of the solution. As shown, although the sizes 
of the landing dispersions decrease rapidly during this time, the location of the center point is extremely constant, 
varying by less than 1 km. For all of these solutions, the Entry/Descent performance (see Section VI) was 100% in- 
spec; landing P(in-spec) varied between 38% and 47%, due largely to the presence of the red hazard boundary very 
near the center of the landing ellipses. 



a) Before TCM-4 


b) After TCM-4 


Figure 5: Spirit Landing Dispersions During Approach 


Spirit’s fourth and final maneuver, TCM-4, occurred 8 days before entry, on December 26, 2003 PST. Figure 
5(b) shows Spirit 99% margined ellipses after TCM-4, using POST estimates. During this interval, changes were 
made to the density model, to account for observed changes in the atmosphere due to a dust storm. One effect of this 
change was an erosion in estimated timeline (time between parachute deploy and retrorocket firing), which led to a 
change in targeted parachute deploy dynamic pressure. Previously set to 700 N/m 2 , the chute deploy target was 
increased to 725 N/m 2 . Changes in density model and chute deploy target are color-coded in the figure. Prior to 
December 30, 2003 the atmosphere models employed for most of development (Kass-Schofield v2.4.1) were used 
for these analyses. After this date the Kass-Schofield V3.1 model, based on MGS TES observations taken December 
27, 2003 were used. In spite of changes to the models and the chute target, the estimated location of the landing 


13 

American Institute of Aeronautics and Astronautics 





ellipse centers was relatively constant, moving by only about 3 km during this time. All post-TCM-4 solutions had 
Entry/Descent in-spec probabilities of 100% and landing in-spec probabilities of 97%. 

After landing, the inertial position of the landed spacecraft was determined from radiometric analyses using 
direct-to-Earth Doppler measurements, and UHF Doppler measurements between the rover and the Odyssey 
spacecraft in Mars orbit. Landmark triangulation, using MOC and descent imaging, determined the final position of 
the lander with respect to imaged features. Figure 6 shows the POST and AEPL landing ellipses, margined and 
un-margined, for the final pre-entry landing dispersions, based on two-way radiometric measurements with a data 
cutoff approximately 105 minutes from Entry. Also shown are the post-entry radiometric and image-relative 
positions. This figure illustrates the close agreement between dispersions calculated in POST and AEPL. The AEPL 
ellipses tend to be slightly smaller due to the lack of lift or side forces in the 3DOF analyses. 



Figure 6: Spirit Final Pre-Entry Dispersions and Final Landing Points 

The final landing point was -14.571892° areocentric latitude, 175.47848° East longitude (radiometric estimate), 
or -14.5692°, 175.4729° E (landmark triangulation). 1 1 1 This was approximately 13.4 km from the average center 
point of the final 2-way dispersion ellipses, and 10.1 km from Target. Spirit's final landing point was located at the 
very edge of the 99% POST un-margined ellipse, suggesting that some of the effects considered in the development 
of the EDL margins (possibly higher than expected winds) may have contributed to the cross-track position. 

B. Opportunity 

Opportunity's third TCM was cancelled in part because of its small magnitude, and also to reduce mission 
activities in the wake of major solar flares which had led to a precautionary commanded reboot of both spacecraft. 
As a result, prior to the fourth planned TCM, Opportunity was much further from its target than was Spirit during 
the same mission phase. Figure 7 shows the Opportunity landing dispersions (99% margined ellipses) as a function 
of time, starting from Entry - 6 weeks (December 11, 2003 PST) to Entry on January 24, 2004 PST. Each ellipse or 
group of ellipses is noted with the PST date of the solution and the atmosphere model used. The pre-TCM-4 ellipses 
(Fig. 7(a)), were generated in AEPL, and are color coded to reflect the different atmosphere models used during this 
time. Numerous model changes were made during final approach, based on updated TES observations. During this 
time the dispersions shrank significantly, but the combined effects of altered atmosphere models and updates to orbit 
determination estimates changed the center points by only about 5 km. For all of these solutions, the Entry/Descent 
performance was, formally, 0% in-spec. Mean entry angles were more than 2° steep, compared with the nominal 
inertial entry flight path angle of -11.5°; this put the entry conditions significantly outside the flight system limits of 
11.5° ± 0.75°. Formally, the landing P(in-spec) was also 0% because all dispersions lay entirely outside the 
characterized area. 

Opportunity's final maneuver was performed January 16, 2004 PST. Because this was the fourth planned 
maneuver, it was called TCM-4, although it was only the third maneuver actually performed in the mission. Ellipses 
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after TCM-4 are POST estimates, color-coded in Fig. 7(b) to indicate the atmosphere models used at this time. (The 
“predict” atmosphere density model, used 1/19/2004 - 1/21/2004, was a prediction of what the density model would 
be at entry; this was essentially the same as the development model (Kass-Schofield v2.4.1) but with larger 
uncertainties to account for lingering dust storm effects.) Dispersion centers remain quite consistent over this time, 
varying less than 5 km; this motion reflected the combined result of changes in density models and orbit 
determination estimates. (Another minor effect was an increase in the targeted parachute deploy dynamic pressure to 
750 N/m 2 , compared to Opportunity's baseline target of 725 N/m 2 . This change was implemented to increase 
timeline margin. Solutions done after January 16, 2003 include the new targeted dynamic pressure; the effect on the 
landing point was a movement of less than 500m uptrack.) For all these solutions, Entry/Descent P(in-spec) = 100% 
and Landing P(in-spec) = 99%. Probabilities of landing in MOC coverage ranged between 75% and 76%, and 
probabilities of landing in low-temperature regions were between 6% and 12%. 
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Figure 7: Opportunity Landing Dispersions During Approach 
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Figure 8 shows the final pre-entry POST and AEPL landing dispersions, based on the last 2-way data (data 
cutoff approximately 105 minutes before entry). As with Spirit, Opportunity's final landing location® was 
determined using radiometric observations (1.948282° areocentric latitude, 354.47417°E longitude) and landmark 
tracking (-1.9462°, 354.4734°); these locations are also shown on Fig. 8. Opportunity landed approximately 14.9 
km distant from the average center points of the final pre-entry ellipses, and 24.6 km from target. POST and AEPL 
estimates are in good agreement. The Opportunity landing point lies within the un-margined landing ellipse predicts. 




Figure 8: Opportunity Final Pre-Entry Dispersions and Final Landing Points 


IX. Conclusion 

The MER Project used an integrated, probabilistic approach to determine landing risk, using hazard maps 
supplied by the science team, cartographically registered base maps, Monte Carlo analyses (encompassing EDL 
trajectories and multi-body analyses of flight system interactions with the environment), and a statistical analysis 
and visualization tool (MarsLS). This suite of tools, processes, and products enabled accurate determination of the 
inertial location of landing hazards expected to be encountered for both Spirit and Opportunity. More importantly, 
these tools allowed the consequences of encountering landing hazards to be quantified. 

Predictions of landing risk (in-spec probabilities) were evaluated and quickly updated as a function of rapidly 
evolving navigation and atmospheric uncertainties, during final approach. These data, plus contours of in-spec 
probabilities, were used as an integral part of the maneuver decision process and the overall targeting strategy. 
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Landing locations of both spacecraft were consistent with the final pre-entry predicts of the margined landing 
dispersion ellipses. Spirit's landing occurred at the very edge of its un-margined landing dispersion ellipse, however, 
suggesting that some of the effects considered in the development of the EDL margins may have been at work. 
Landing dispersion predicts during the final weeks of cruise were strongly influenced by updates in atmospheric 
models. 
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